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Abstract 

A new aerospace application of structural reliability 
techniques is presented, where the applied forces depend 
on many probabilistic variables. This application is the 
plume impingement loading of the Space Station Free- 
dom Photovoltaic Arrays. When the space shuttle 
berths with Space Station Freedom it must brake and 
maneuver towards the berthing point using its primary 
jets. The jet exhaust, or plume, may cause high loads 
on the photovoltaic arrays. The many parameters gov- 
erning this problem are highly uncertain and random. 
An approach, using techniques from structural reliabil- 
ity, as opposed to the accepted deterministic methods, 
is presented which assesses the probability of failure of 
the array mast due to plume impingement loading. A 
Monte Carlo simulation of the berthing approach is used 
to determine the probability distribution of the loading. 
A probability distribution is also determined for the 
strength of the array. Structural reliability techniques 
are then used to assess the array mast design. These 
techniques are found to be superior to the standard 
deterministic dynamic transient analysis, for this class 
of problem. The results show that the probability of 
failure of the current array mast design, during its 
15 year life, is minute. 

Introduction 

There exists a class of civil structures which have a 
wide variety of uncertain loadings and are difficult to 
test at a system level, but must still possess a long life 
with minimal risk of failure. At the same time, these 
structures must not be excessively expensive or weighty. 
Because of the random character of the uncertainties in 
both the loading and the capability of these structures, 
a probabilistic approach to design is warranted. The 
probabilistic discipline of structural reliability has been 
developed in order to ensure safety and consistency in 
structural designs and in the civil engineering design 
codes. 1 2 Recently, structural reliability techniques have 
also been applied to aerospace engineering components, 
such as the turbopump blades of the space shuttle main 
engine. Here, the random variables of concern have 
focused on the constitutive relationships and properties 
of the structure. In this study, a new aerospace applica- 


tion of structural reliability techniques is presented, 
where the applied forces as well as the structure depend 
on many probabilistic variables. This application is the 
plume impingement loading of the Space Station Free- 
dom Photovoltaic Arrays. 

When the space shuttle approaches Space Station 
Freedom it must brake and maneuver to come to a com- 
plete stop relative to Space Station Freedom. This is 
achieved through the use of the shuttle’s primary reac- 
tion control system (PROS) jets, each of which delivers 
about 800 lb of force. The plume from these jets 
expands quickly in space so that a low density plume 
impinges upon the photovoltaic (PV) arrays (Fig. 1). 
However, since the area of the photovoltaic arrays is so 
large (110 ft by 39 ft, Fig. 2), the small plume forces can 
cause significant loading in the photovoltaic array. Of 
particular concern is the bending moment at the base of 
the mast, which can be very large because of the mast’s 
long length. 

Calculating the exact transient loads which result 
from plume impingement forcing is quite difficult 
because of the many random variables which govern the 
analysis. These random variables are the shuttle posi- 
tion, the shuttle orientation, the space station orienta- 
tion, space station thermal deformation, photovoltaic 
array mast twist, feathered angle accuracy, predicted 
plume forces accuracy, the dynamics excited by a partic- 
ular approach to Space Station Freedom (essentially 
dynamic load factor), modeling uncertainty, and the 
array mast strength uncertainty. Most of these vari- 
ables define the geometric orientation of the space 
shuttle with respect to Space Station Freedom and, 
therefore, define the amount of plume exhaust impinging 
upon the arrays. 

All of these random variables are independent and it 
is highly unlikely that all of their worst case values 
would coincide in time. Nonetheless, a set of transient 
dynamic analyses are currently performed, using forcing 
functions which are selected in an attempt to bound the 
worst possible applied forces. The resulting internal 
loads are compared to the limit load capability of the 
structure. Results from the referenced work indicates 
that at the permanently manned configuration (PMC, 
Fig. I), the bending moment applied to photovoltaic 
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array mast exceeds the limit load by 10 percent. This 
attempt to bound the worst possible loading has been 
made the baseline for structural design. 

This study demonstrates the use of structural 
reliability techniques to compute the probability of 
failure of the array masts, with loading governed by 
random inputs and an uncertain structural capability. 
The probability of failure during a single shuttle berth- 
ing approach to PMC and during the lifetime of the 
arrays will be presented. This work will be important in 
deciding whether or not the worst case deterministic 
transient analysis discussed above is appropriate. This 
work lays the foundations for a plume impingement 
analysis methodology that is probability based and one 
that produces a realistic, and still reasonably conserva- 
tive, loads assessment. A cost analysis based on the 
probability of failure is also presented. 

Although plume impingement loading is a concern 
for the entire space station, this study focuses on the 
bending moment in the PV array masts. In particular, 
the arrays on the port side (Fig. 1) are emphasized 
because they are the most heavily loaded. The method- 
ology developed is useful for these arrays, and for all 
plume impingement loads analyses and stage configura- 
tions of the space station. 

Theoretical Overview 

Two methods of performing probability analysis are 
presented. The first is conventional Monte Carlo 
simulation which produces a probability distribution for 
an output, based upon statistical trials of a sequence of 
random vectors. This method is easily implemented, 
unfortunately, it requires a large number of simulations 
to accurately predict the output probability distribution. 
The second method presented is a first-order second- 
moment scheme introduced by Hasofer and Lind. 6 This 
method uses the probability distributions of the random 
variables in the limit state function to produce the 
probability of failure. In addition to the probability 
subjects presented, system reliability and cost analysis 
are briefly discussed. 

Monte Carlo Simulation 

Monte Carlo simulation is based upon running many 
simulations of a system with random variable inputs 
and determining the distribution or probability of an 
output. 1 In the case of building a distribution for an 
output, each of the input variables is varied randomly 
according to its probability distribution function and 
input into the simulation. The random output is then 
recorded. This process is repeated many times until a 


distribution for the output can be accurately defined. 
This method has grown increasingly popular in recent 
years with the advances in computational speed, but the 
number of simulations required to build an accurate 
distribution of the output can be very large. In addi- 
tion, any change to any of the input variables requires 
that the entire analysis be redone. The benefit of the 
method is its simplicity. 

For the case of using Monte Carlo simulation to 
determine the probability of an output failing, a failure 
function must be defined. Consider the limit state (fail- 
ure) function, g = R - S where R is the resistance 
(strength) and S is the load. Then, if g < 0 (S > R) 
the output fails and if g > 0 (S < R) the output sur- 
vives. The limit state function g has a binomial distri- 
bution and the number of failures divided by the total 
simulations is the probability of failure, or more gener- 
ally, 

P f = Jl(f WkW dx » | £ gi)/N (1) 

where I[g(x)] is an indicator function such that 1=1 
if g < 0 and I = 0 if g > 0, f(x) is the probability 
density of the inputs, and N is the number of simula- 
tions. As indicated above, this method is easy to imple- 
ment, but the number of simulations required can be 
very large. This is especially true if the probability of 
failure is low, since very few of the simulations will be 
failures. The approximate variance on P f in Eq. (l) is 
given by 

M p >] - - p i.«..J/ N < 2 > 

To properly define a probability of P f will take at least 
four orders of magnitude more simulations than 1/P f 
in order to achieve a coefficient of variation less than 
1 percent. Therefore, for P f = 10“ 3 (~3<r), 10 7 simula- 
tions are needed to get the coefficient of variation of P f 
to less than 1 percent. Note that Eq. (2) is not a 
practical formula since Pf >actua j is not known. 

First-Order Second-Moment Methods 

These methods are called first-order methods because 
they use the first-order term of a Taylor’s series expan- 
sion to approximate the mean and the standard devia- 
tion (second moment) of the limit state function. They 
differ from the Monte Carlo approaches in that each 
variable within the limit state function is represented 
only by its distribution, mean, and standard deviation. 
The distributions of random variables are utilized to 
yield the probability of failure. The Hasofer-Lind 
method 6 gives, with respect to the limit state function, 
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an invariant definition of the safety index and the 
probability of failure. In the Hasofer-Lind method, each 
variable is transformed to a reduced coordinate with a 
zero mean and unit variance. The safety index becomes 
the minimum distance from the origin to the limit state 
in the space of reduced coordinates. A detailed descrip- 
tion of this method is beyond the scope of this paper 
and is contained in several excellent references. 1 ’ 2 ’ 6 In 
general, the solution to this problem must be found 
using a computer program. In this study, the algorithm 
presented by Rackwitz and Fiessler is used. 7 

The limitation of this method is in the use of only 
the first and second moments. This method is exact if 
the distribution of the limit state function is Gaussian 
since a Gaussian distribution can be completely specified 
by its mean and variance. If the distribution of the 
limit state function is not Gaussian, then other moments 
are required to completely specify the distribution. In 
this case, second moment methods provide only approxi- 
mations to the probability of failure. 

System Reliability 

Practical engineering problems almost always have 
more than one failure mode. Each failure mode may be 
represented by a particular limit state function and, 
therefore, have a particular probability of failure, P fi . 
Each of these component probabilities must be combined 
to yield a system probability of failure.® For a system 
which is represented as a series, failure of any compo- 
nent is considered to be a failure of the entire system. 
When a series system has no correlation between the 
failure modes, the system probability of failure 1 is given 
by 

Ff= i -nu-Pfi) w 

When a series system has correlation in its modes of fail- 
ure, its probability of failure is lower. Therefore, the 
above equation represents an upper bound on the prob- 
ability of failure and is conservative. 

Cost Analysis 

Once the probability of failure is defined, cost 
analysis may be performed to optimize a design. Cost 
may be defined in many ways. However, the total cost, 
C*p is the most logical. Total cost should encompass 
initial costs, Cj, and the cost of failure, C F . Initial costs 
include design, manufacturing, and construction costs. 
The cost of failure can be more difficult to define or 
even nebulous if loss of life or status are considered. 
However, a cost must be associated with each conse- 


quence of a failure. Given Cj and Cp the total cost 
of a design is given by, 

C T = Cj + P f * C F (4) 

Note that Cp is multiplied by the probability of failure 
to account for the fact that Cp may never be required. 

The optimum design is found by minimizing C T . 
The curve of C*p will always be concave up if an in- 
crease in Cj causes a decrease in Pp Therefore a mini- 
mum will exist. 


Methodology 

Because of the complicated laws of physics governing 
jet exhaust in a vacuum, it was not practical to include 
the necessary equations of the problem physics in the 
limit state functions. Therefore, the conventional Monte 
Carlo approach was chosen to create the applied plume 
load distributions (denoted by S). Distribution func- 
tions of the photovoltaic array strength, and uncertainty 
factors for plume physics and array dynamics were also 
derived (denoted by R and U, respectively). This 
problem has multiple failure modes and limit state 
functions. To avoid repeating the large number of cal- 
culations required in Monte Carlo analysis for each fail- 
ure mode, the Hasofer-Lind second-moment method was 
used to calculate the probability of failure from the load 
and strength distributions. The form of the nonnormal- 
ized limit state function used in this analysis was 

8 ^mMt ^plume * ^dynamic /e * 

l 5 ) 

* nominal ® breakout) 

A description of how the mean and variance of the 
variables in Eq. (5) were determined follows. 

Monte Carlo Calculation of Loads Distribution 

Previous loads analyses indicate that the port 
inboard arrays are the ones critically loaded by plume 
impingement. Therefore, this study will focus on these 
two arrays: PIU (port inboard upper) and PIL (port 
inboard lower) (Fig. 1). These arrays are in their 
optimal feathering position, which is defined as the 
location of the a and & joints that minimize the 
plume impingement loads. Figure 1 shows the arrays in 
their feathered orientations. 

Two different shuttle maneuvers were considered 
independently: the nominal approach and the NormZ 
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breakout. The nominal approach is a series of different 
jet firings as the shuttle brakes and maneuvers towards 
the berthing point. Most of the firings are attitude 
adjustments, but the Z-braking (not to be confused 
with the NormZ breakout maneuver) and Y-burn 
sideways firings are frequent and impinge greatly on the 
PV arrays. Therefore, only these two firings were con- 
sidered to contribute to the loading of the arrays during 
a nominal approach. 

The second maneuver of importance is the NormZ 
breakout, which is a long duration NormZ firing used to 
generate an opening velocity between the shuttle and 
Space Station Freedom during an abort of the approach. 
This maneuver is restricted to the last 75 ft of the 
approach. 

Now consider the distributions of the input variables 
beginning with shuttle position and orientation with 
respect to Space Station Freedom. During a nominal 
approach, the Z-braking jets can only be fired within 
75 ft of the space station and the Y-burn has little 
impact outside this distance, so the distribution of 
shuttle distance away from Space Station Freedom is 
assumed such that 99.9 percent of the firings take place 
within 75 ft of the space station. Even though the Z- 
braking jets are not supposed to be used outside 75 ft, 
there is a possibility they will be fired so this 0.1 percent 
chance is held open by the distribution. The shape of 
the distribution is defined by the braking profile. If the 
shuttle pilots braked at a constant rate then the proba- 
bility of being at a certain position would grow linearly, 
with more time spent nearer the space station, but 
because the pilots tend to brake more towards the end, 
an exponential curve was used (Fig. 3). Because of the 
faster speeds at 75 ft, the shuttle is less likely to be there 
than at 10 ft. The distance the shuttle is away from the 
space station is one random variable input. 

A NormZ breakout can only occur within the final 
75 ft, but again the possibility is left open that one will 
be performed outside this range. However, unlike the 
nominal approach, it is also assumed that the pilots may 
get into trouble outside 75 ft and hold until 75 ft in 
order to perform the high authority NormZ breakout. 
Therefore a spike is placed on the breakout distance 
distribution (Fig. 4) such that 10 percent of the break- 
outs occur at 75 ft. 

As the shuttle approaches the berthing point it 
should remain within a 10° half angle cone originating 
from the berthing point and expanding along the line of 
approach. The shuttle is uniformly likely to be any- 
where within this cone, and it is assumed that there is 
a 5 percent chance that the pilots will exceed the limits 
of the cone and that the likelihood of being a distance 
outside the cone decreases linearly to zero (Fig. 5). For 


the nominal approach, one other restriction is applied: 
Only the port half of the cone is used since the shuttle 
will only fire towards the port side if it is on the port 
side. The position of the shuttle within the cone of 
operations is two random variables: Distance from the 
cone centerline and the angle on the cone. 

The shuttle orientation is maintained by a digital 
autopilot which has ±2° deadband, which means that 
the shuttle can temporarily reach maximum rotations 
larger than ±2°. It is assumed that the distribution of 
shuttle orientation about any of its three axes is normal 
and that the deadband is at 2 a on a normal distribu- 
tion (Fig. 6). With this distribution, there is a 0.1 per- 
cent chance that the shuttle will exceed ±Z C of rotation. 
The orientation of the shuttle with respect to Space 
Station Freedom is three random variables: X, Y, and 
Z shuttle rotations. 

The space station orientation is maintained by an 
automatic control system of control moment gyros with 
backup by a reaction control system. Since the control 
authority of these are low, it is not clear that Space 
Station Freedom can remain within its deadbands of 
±l c . Therefore, the deadband is considered to be the 
1 <r position on a normal distribution (Fig. 7). This 
makes the distribution of the three space station axes 
identical to that of the shuttle (Fig. 6). The orientation 
of the space station is three random variables: X, Y, 
and Z space station rotations. 

As the space station orbits the Earth it undergoes 
thermal deformations as different sides are lighted. 
Early indications are that the deformation may be as 
large as ±5° from the center to the end of the truss. 
This is the maximum about each axis. The likelihood 
of a particular deformation is given by a normal distri- 
bution with 5* as the 3<r deviation (Fig. 8). The ther- 
mal deformation of Space Station Freedom is three ran- 
dom variables: X, Y, and Z space station truss 

distortions. 

Also considered is the design tolerance on the array 
mast tip twist. Specifications state that this may be up 
to 3°. This twist is assumed to be normally distributed 
about the perfect design with 3° being the 3 a deviation 
(Fig. 9). The mast tip twist is one random variable. 

There is approximately 30 percent 9 uncertainty in 
the current equations 10 used to derive plume impinge- 
ment forces. To include this uncertainty in the analysis, 
another random variable representing this uncertainty is 
multiplied to the dynamic results. This factor is mod- 
eled as being normally distributed about 1.0 with a 
standard deviation of 0.1 (Fig. 10). In this way the 
plume physics is treated as one random variable. 
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As mentioned earlier, the PV arrays are being 
feathered to minimize plume impingement loads. How- 
ever, this is not dynamic feathering, so one position for 
the a and p joints has been found and these angles 
are held during the entire approach. There is some 
uncertainty in these angles due to many factors, among 
which are the possible joint locking locations, uncer- 
tainty about the on-orbit position of the joints, and 
dynamic twisting. Therefore, the feather angles cannot 
be guaranteed to be perfect, so a distribution is 
assumed. The designers suggest that the 3<r values are 
±4° for the a joint and ±3° for the /3 joint. The 
normal distributions used for the a and joint angles 
are shown in Figs. 11 to 13 about their feather positions 
(shown in Fig. 1). The feather angle uncertainties are 
two input random variables: a and /? rotations. 

The dynamics of the arrays are the most difficult of 
all the random variables to quantify. Ideally, a large 
database of shuttle approach firings could be used to run 
dynamic response as part of the simulation process, how- 
ever, lacking a database of shuttle approaches, some 
assumptions needed to be made about the firing time 
histories and their associated dynamic load factors 
(DLF’s). An estimate was made of what the Str DLF 
is for each firing. From the data, an estimate was also 
made for the variance of the 5 <r firing about the expect- 
ed value. The numbers are different for each of the 
arrays and are shown in Figs. 14 to 16. For the nominal 
approach, the dynamic response is dominated by the 
Y-burns, so much so that the Y-burn is the only firing 
that effects the PIU array. Because of this, on the PIU 
array the DLF due to the Y-burns is shown in Fig. 14 
and the DLF on the Z-braking firings is zero. On the 
PIL array, much of the load is due to the forces actually 
impinging upon the PIU array and dynamic coupling. 
Because of this, the DLF for the Y-burn on the PIL 
array (Fig. 15) is applied to the Y-burn forces on the 
PIU array. The DLF due to the Z-braking firings 
(Fig. 16) is applied to the Z-braking firings on the PIL 
array itself. Array dynamics are two input random 
variables: Y-DLF and Z-DLF. 

For the NormZ breakout the DLF’s change to those 
shown in Figs. 17 and 18. In this case, the bulk of 
the plume impinges upon the PIL array and because of 
dynamic coupling, the DLF’s are both applied to the 
forces on the PIL array. 

The finite element model used to generate the dy- 
namic response and the DLF’s has an uncertainty asso- 
ciated with it. This uncertainty is estimated to be 
±20 percent. This modeled as a normally distributed 
random variable with a mean of 1.0 and a standard 
deviation of 0.0667 (Fig. 19). 


Photovoltaic Array Strength Distribution 

The Space Station Freedom Photovoltaic Array 
consists of four major elements, which are shown in 
Fig. 2. The first is a center deployable truss or mast, 
the primary load bearing element of the system. Next, 
there is a canister where the mast is stored during 
launch. It also provides a transition structure on orbit. 
Third are the blankets upon which solar cells are 
mounted. The final component is the blanket boxes 
which protect the blankets during launch. The blanket 
boxes are mounted off of the top of the mast and the 
canister, and once deployed, support the tensioned 
blankets. It is the tension which supplies the structural 
bending stiffness to the blankets. The dynamics of this 
configuration have been studied in detail. 

The element of the photovoltaic array which is the 
most critical for loads is the mast. The cause of this 
criticality is the mast’s long length. Even a small load 
applied onto the blankets is transferred, through the top 
blanket boxes, onto the top of the mast. This small 
force causes a large moment at the base of the mast. 
The mast itself is a folding truss with four longerons 
(Fig. 20). There are battens and other components 
which hold the longerons together. Because of its 
deployability, there are additional components which 
make the mast a complicated structure, as is illustrated 
in Fig. 21. 

Despite the fact that the array mast is complex, its 
primary failure mechanism is classical Euler buckling of 
the longeron, 12 as is shown in Fig. 22. When the entire 
mast is placed into bending about its neutral axis, the 
moment forces longerons into compression and tension 
(Fig. 23). When the bending is in a plane 45° from the 
face of the mast, then, in each bay, two longerons are in 
the neutral plane, one is in tension, and one is in 
compression. If the compression load due to bending 
exceeds the Euler buckling load, P cr , that longeron will 
then buckle. It is the buckling of the longerons in 
compression that defines the design limit load of the 
entire mast. The plane 45° from the face is weakest 
plane of the mast. For bending in the plane of the face 
of the mast, the mast is v/5” times stronger. The reason 
for this is that there are two longerons taking load in 
compression while the distance from the neutral axis to 
the longerons is reduced by y/T. 

Any longeron in compression throughout the entire 
length of the mast may fail, but the applied load is 
greatest at the base and decreases in each bay up the 
length of the maat. The probability of failure must be 
calculated for each longeron. These failure modes are 
independent and so the mast may be represented as a 
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series system. The overall probability of failure is then 
calculated using Eq. (3). 

It should be noted that failure modes other than 
longeron buckling exist in the photovoltaic array mast. 
These failure modes were not considered at this time. 
The required design information to analyze these failure 
modes in detail was not available. It is known, however, 
that these failure modes have higher critical loads than 
the critical load for longeron buckling. 

When a single longeron buckles the entire system 
does not fail catastrophically. For example, it takes two 
longerons to fail in any bay for catastrophic failure to 
occur. When considering that the longeron strength is 
a random variable, the probability of this mode of fail- 
ure will be much lower than that of one longeron buck- 
ling. Even though it is not a catastrophic failure, one 
longeron buckling was still considered to be system fail- 
ure. The reason for this definition is that if one 
longeron fails the array may not be able to be re-stowed 
for on-orbit replacement. This would drastically compli- 
cate EVA operations, and would have mission success 
and safety implications. Therefore, because this defini- 
tion is conservative and consistent with the Space 
Station Freedom program specifications, one longeron 
buckling was defined as system failure and the mast 
becomes, in effect, a series system. 

The distribution of the array strength is assumed to 
be log-normal, although no fabrication data is available 
at this time to confirm this selection. However, this 
assumption is consistent with structures whose members 
are inspected. 1 Discarding the obviously defective 
members truncates the left hand tail of the strength dis- 
tribution. In the case of the photovoltaic array, the log- 
normal distribution is especially appropriate because of 
the extensive inspections and testing which will be per- 
formed on mast components. The mean strength is as- 
sumed to be the calculated buckling load multiplied by 
an empirical knockdown factor. The variance was calcu- 
lated by assuming that the project defined safety factors 
bound the 3<r standard deviation mast strength and 
using the definitions of the log-normal probability 
distribution. 13 It is worth noting that the empirical 
factors used in the aerospace industry to define a struc- 
tural design limit load 1 are roughly equivalent to the 
— 3<r strength based on a probability distribution. 

Results 

Load Distribution 

The nominal and NormZ breakout load distributions 
were computed separately based on 100,000 Monte Carlo 


simulations. The resulting distributions of the weak axis 
moments are shown in Figs. 24 to 27. In these figures, 
the data points are the results of the simulations and the 
curves are the distributions used to model the data. 
These parameters of the distributions are detailed in 
Table 1. The type of distribution was determined by 
plotting the results on normal and log-normal distribu- 
tion paper. The breakout maneuvers produced log- 
normal distributions and surprisingly the right sides of 
the nominal approach produced normal distributions. 

The distributions chosen for the nominal approach 
only match the right side of the data because of the odd 
shape of the data. This odd shape is due to the fact 
that at about 20 ft out, the shuttle is edge on to the 
PIU array. Therefore, there are many points at which 
the Y-burn loads on the array are near zero. Inside of 
20 ft, the Y-burn plumes one face of the arrays and 
outside of 20 ft the Y-burn plumes the other face. This 
crossover effect makes it impossible to match a standard 
distribution to the results. However, this should not 
effect the results significantly since the right side of the 
curve will dominate the probability of failure analysis 
and this side of the curve matches the data well. 

Strength Distribution 

Three mast designs were considered, each of which 
represents three discrete designs of the Space Station 
Freedom Photovoltaic Array. The design limit loads 
of the three masts analyzed were 8300, 30,700, and 
48,500 in.-lb. The calculated means and coefficients of 
variation for these three masts are shown in Table 2. A 
plot of the strength distribution of the 48,500 in.-lb 
mast is shown in Fig. 28. This is the current space 
station photovoltaic array mast design. The PIU and 
the PIL mast were given the same distribution. 

Probability of Failure and System Reliability 

The probability of failure of each longeron in both 
the PIU and the PIL photovoltaic arrays was calculated. 
For the two specific cases of the bottom longerons of the 
30,700 in.-lb PIL and PIU arrays, the design points, var- 
iable sensitivity, and probability of failures are shown in 
Tables 3 and 4. The probability that any longeron, in 
either the PIU mast or the PIL mast would fail, was cal- 
culated using Eq. (3). As discussed previously, this 
equation is applicable when there is no correlation in the 
strength of the longerons. Since there is almost certainly 
some correlation in the strength of the longeron mem- 
bers, using Eq. (3) is conservative. At this time, no 
correlation data is available, and so a conservative 
approach is warranted. 


6 



The probability of failure of either array mast over 
the entire life of Space Station Freedom was also com- 
puted. It was assumed that a breakout would occur on 
every approach, which is likely very conservative, but no 
data exists upon which to make a better assumption. 
The total number of approaches to Space Station 
Freedom over its entire life will be about 120. The 
lifetime probability is given by, 

Pf = 1 - (l - Pf, event)' 20 (6) 

Table 5 summarizes the system probabilities of failure 
calculated. The probability of failure ranges from an 
almost certainty in the case of the 8300 in. -lb array to 
almost zero in the case of the 48,500 in.-lb array, the 
current design. The exact numerical values for P f , 
given in Table 5, are not accurate when these values are 
extremely small. There are two reasons for this inaccu- 
racy. First, an insufficient number of Monte Carlo sim- 
ulations were performed to accurately define the load 
distribution in the extreme tail region (as noted by 
Eq. (2)). Secondly, the Hasofer-Lind method with the 
Rackwitz-Fiessler algorithm is not accurate in the 
extreme tail regions. In spite of this, these values are 
so low, in the case of the current design, that an exact 
value for P f is not relevant. As discussed in previous 
sections, many uncertainties remain in these analyses. 
However, where an uncertainty existed, a conservative 
assumption or parameter value was used. Therefore, 
photovoltaic array mast failure due to plume impinge- 
ment, with the current design, is highly unlikely. 

As a comparison, deterministic analyses have shown 
that an array mast of 33,000 in.-lb would be required to 
insure no photovoltaic array mast failures. Yet, this 
work shows that the probability of failure of the 
30,700 in.-lb mast is approximately 0.0012 percent. A 
failure of a 33 000 in.-lb mast would require approxi- 
mately a 4.2<r event. Therefore, the deterministic 
transient analysis, with bounding worst case force 
assumptions, does not give a clear picture of the risk 
involved with these particular designs. 

Sensitivity Analysis 

A result available from the Rackwitz and Fiessler 
algorithm is the sensitivity (a) of the design point, and 
hence the probability of failure, to the random variables. 
A high a indicates that the variable is important to 
the design point while a low a indicates that the vari- 
able is not important in the probability of failure. 


Nominal plume load, NormZ breakout plume load, 
plume physics uncertainty, modeling uncertainty, and 
PV array strength. Tables 3 and 4 show the sensitivity 
of the probability of failure of the 30 700 in.-lb PIU and 
PIL arrays to these random variables. As we would 
expect, the array strength is always important. On the 
load side, note that the PIL array is dominated by the 
NormZ breakout load. On the PIU array there is no 
clearly dominant variable but the nominal load is the 
most important and the model uncertainty factor is the 
least important. These sensitivity results suggest that 
effort and money should be spent increasing the strength 
or reducing the loads and not reducing the uncertainty 
factors. 

Cost Analysis 

The values cited here are relative and are shown 
more to illustrate the techniques involved in cost analy- 
sis, rather than to present precise project cost infor- 
mation. Let the original initial cost be simply C Q . 
To increase the strength of the mast from 8300 to 
30,700 in.-lb cost approximately 0.025C o . The redesign 
which increased the strength of the mast to 48,500 in.-lb 
cost approximately 0.02C o . These data points are 
plotted in Fig. 29 (normalized by C c ). 

The cost of failure was also estimated. A scenario 
was created which would yield a conservative cost esti- 
mate for the failure involved. Because single longeron 
buckling was used as the failure point, which is not a 
catastrophic failure, a catastrophic scenario was not 
created. The scenario developed, therefore, assumed 
single longeron buckling. If this longeron buckled it 
would be likely that an elbow or corner fitting would 
also fail. If this occurred, array retraction might not be 
possible. Since the photovoltaic arrays are to be re- 
placed periodically, when their solar cells wear out, part 
of the replacement process consists of retracting the old 
arrays, and returning them to Earth in the space shut- 
tle. There would be a cost associated with a compli- 
cated array retrieval. An estimate for this cost is 2.5C 0 , 
although this cost is not based upon C 0 . The probabil- 
ity of failure of each array was multiplied by the cost of 
failure to identify the expected cost of failure. A plot of 
these values is shown in Fig. 29 (normalized by C c ). 
Finally, these sets of values were added together to com- 
pute total normalized cost using Eq. (4), and were also 
plotted in Fig. 29. Assuming that total cost minimiza- 
tion is the design criteria, then based upon the approxi- 
mate data used, the 30,700 in.-lb array would appear to 
be the optimal design. 


In this analysis there were five random variables 
used in the Rackwitz and Fiessler algorithm (Eq. (5)): 



Suggested Developments 

This study is a demonstration of structural reliability 
techniques to a unique application. However, the 
simplifying assumptions made prohibit the results from 
being utilised as more than information. In order to 
make these techniques more useful, several changes are 
suggested. These include considering dynamic transient 
analysis, considering variance reduction techniques, 
using better algorithms, and considering other failure 
modes. 

In order to progress from this initial study to a more 
realistic and acceptable reliability assessment, actual 
dynamic analysis needs to be performed. There are two 
constraints to employing Monte Carlo simulation to do 
this. First, dynamic analysis requires so much computa- 
tion that the resources most likely would not be avail- 
able to run the required number of simulations to 
properly define the load distribution. Secondly, shuttle 
simulations are difficult to develop so that, at best, a 
few hundred simulated approaches to Space Station 
Freedom would be available. 

The above limitations would place so much uncer- 
tainty on the Monte Carlo simulation results that they 
would not be useful. However, in recent years variance 
reduction techniques have been developed to make the 
Monte Carlo process converge more quickly to the true 
probability of failure. One of these methods is known as 
importance sampling. Importance sampling involves 
modifying Eq. (1) such that g(x) is less than zero more 
often than would naturally occur based on P f . This is 
done by sampling x more frequently near the critical 
values. The probability of failure can then be written 
as, 

p f = JifcMjfWpM/pM dx 

/ (7) 

» ( E «i ) * f w/[p( x ) * N 1 

where p(x) is a probability density function centered 
around the failure point. This method can reduce the 
number of simulations required by several orders of 
magnitude over direct Monte Carlo. 15 

As additional design information about the photo- 
voltaic array becomes available, the additional higher 
failure modes such as batten collapse should be consid- 
ered. It is possible to represent these higher modes as a 
series system, with no correlation with longeron buckling 
failure modes. This would require a series of indepen- 
dent analyses. Consideration of catastrophic system fail- 
ure, which would be a combination of different failure 
modes, would be much more complicated than consider- 


ing higher buckling modes. This analysis would no 
longer be a series of independent analyses. 10 Both the 
probability of failure and system reliability analyses 
would need to be revised. Finally, as statistical informa- 
tion about the mast component fabricating becomes 
available, it should be included in formulating the 
strength distribution of the mast. 

Limitations in the Rackwitz-Fiessler algorithm have 
been discussed. Any future work should utilize a first 
order-second moment algorithm with improved accuracy 
in the tail regions. 

Conclusions 

A methodology has been presented for examining 
internal loads on a structure when the applied forces are 
dependent on many random variables. It is applicable 
when the dependence of the loading on these random 
variables is not easily defined. This method places, as 
is standard in structural reliability analysis, the question 
of interned loads in terms of a probability of failure 
rather than a limit load exceedance. This methodology 
has been successfully applied to plume impingement 
loading from the space shuttle jets on the Space Station 
Freedom Photovoltaic Array. This method is also suit- 
able to plume impingement loading on other components 
of the Space Station Freedom, as well as other large 
space structures subject to shuttle approaches. This 
probability based approach has been shown to be viable 
and could be developed as a more appropriate alterna- 
tive to deterministic analysis of plume impingement. 

Using the many conservative assumptions discussed 
in the paper, it was shown that the probability of failure 
of the Space Station Freedom Photovoltaic Array mast 
in bending due to plume impingement is very low. A 
large caveat must be issued. The design, operations, 
and specifications of the Space Station Freedom are still 
evolving. Changes in these items can have a large 
impact on the validity of the previous conclusion. Two 
previous array mast designs were also examined. The 
original design of the array mast had a high probability 
of failure, and an intermediate design had a low proba- 
bility of failure. 
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TABLE 1.— PARAMETERS FOR PHOTOVOLTAIC 
ARRAY LOAD DISTRIBUTIONS 


Distribution 

Type 

Mean, 

in.-lb 

Coefficient of 
variation, 
percent 

PIU nominal 

Normal 

5400 

61.1 

PIL nominal 

Normal 

3400 

60.3 

PIU breakout 

Log-normal 

4041 

29.8 

PIL breakout 

Log-normal 

6216 

29.7 


TABLE 2. — PHOTOVOLTAIC ARRAY MAST 
STRENGTH PROPERTIES 


Mast design 
limit load, 
in.-lb 

Type 

Mean, 

in.-lb 

Coefficient of 
variation, 
percent 

8 300 

Log-normal 

13 750 


30 700 

Log-normal 

50 655 


48 500 

Log-normal 

91 263 

■91 
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TABLE 3. — DETAILED PROBABILITY DATA OF BOTTOM LONGERON, 


30,700 in.-lb PIL ARRAY 


Variable 

Mean 

Coefficient of 
variation, 
percent 

Design 

point 

“i 

sensitivity 

Mast strength 

50,655 

16.4 

31,007 

0.5389 

Nominal dynamic load 

3,400 

60.3 

6,462 

—.2729 

Breakout dynamic load 

6,216 

29.7 

18,492 

-.7144 

Plume uncertainty factor 

1.0 

10.0 

1.157 

-.2869 

Model uncertainty factor 

1.0 

6.7 

1.075 

-.2058 

Safety index, £ = 5.455 

Probability of failure, P f = 2.4600x10“* 


TABLE 4.— DETAILED PROBABILITY DATA OF BOTTOM LONGERON, 


30,700 in. -lb PIU ARRAY 


Variable 

Mean 

Coefficient of 
variation, 
percent 

Design 

point 

<*» 

sensitivity 

Mast strength 

50,655 

16.4 

28,593 

0.629S 

Nominal dynamic load 

5,400 

61.1 

15,728 

-.5731 

Breakout dynamic load 

4,041 

29.8 

6,584 

-.3328 

Plume uncertainty factor 

1.0 

10.0 

1.179 

-.3286 

Model uncertainty factor 

1.0 

6.7 

1.087 

-.2378 


Probability of failure, P f = 2.3743x10 * 


TABLE 5.— PROBABILITY OF FAILURE SUMMARY FOR THREE 


MAST CAPABILITIES 


Mast design 
limit load, 
in. -lb 

upper array 

Pf. 

lower array 

p». 

either array 

Pf. 

lifetime 

8,300 

30,700 

48,500 

0.667 

4.64x10“* 

2.86xl0“ 1J 

0.467 

2.37xl0~ 8 
8.84x 10~ 12 

0.769 

1.00x10“* 

1.17X10 -11 

1.00 

1.20x10“* 

1.40x10“” 
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Distance away from berthing point 
during a nominal approach (ft) 

Figure 3.— Frequency of occurrence of distance away from 
the space station when the jets were fired during the 
Monte Carlo simulations of the nominal approach. 
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Offset from centerline of cone (degrees) 


Figure 4. — Frequency of occurrence of distance away from 
the apace station when the jets were fired during the 
Monte Carlo simulations of the breakout maneuver. 


Figure 5. — Distribution of radial offset from the centerline 
of the cone of approach when jets were fired in the 
Monte Carlo simulations. Distribution is designed as 
uniform inside of ±10° and decreasing linearly to zero 
at 12.2°. 



-5-4-3 -2 -1 0 1 2 3 4 5 

Misalignment (degrees) 

Figure 6.— Frequency of occurrence of shuttle rotation 
about X, Y, and Z axes when jets were fired in the 
Monte Carlo simulations. Distribution is designed as 
normal with a mean » 0, <r * 1 .0°. 



-8-6-4 -2 0 2 4 6 8 


Thermal deformations about any axis 
(degrees) 

Figure S.—Frequency of occurrence of thermal twist 
deformations about X, Y, and Z axes when jets were 
fired In the Monte Carlo simulations. Distribution is 
designed as normal with a mean = 0, a - 1 .67°. 



-5 -4 -3 -2 -1 0 1 2 3 4 5 


Misalignment (degrees) 

Figure 7. — Frequency of occurrence of space station rota- 
tion about X, Y, and Z axes when jets were fired in the 
Monte Carlo simulations. Distribution is designed as 
normal with a mean >0, a « 1 .0°. 



Twist at tip of mast (degrees) 

Figure 9. — Frequency of occurrence of mast design twist 
when jets were fired In the Monte Carlo simulations. 
Distribution Is designed as normal with a mean » 0, 

a = 1.0°. 
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Plume force prediction uncertainty factor 

Figure 1 0. — Distribution of the uncertainty factor on the 
plume impingement force prediction used in the limit 
state function. Normal distribution with mean = 1 .0, 

a = 0.1 . 



Port inboard upper array beta joint angle 
(degrees) 

Figure 1 2.— Frequency of occurrence of port inboard 
upper photovoltaic array beta joint angles selected when 
Jets were fired during the Monte Carlo simulations. Dis- 
tribution is designed as normal with a mean * -22°, 
a = 1.0°. 



Port Inboard upper array nominal Y-bum 
dynamic load factor 

Figure 14.— Frequency of occurrence of dynamic load 
factor on the port inboard upper photovoltaic array due 
to Y-bum firings during a nominal approach. Distri- 
bution Is designed as normal with a mean * 0.6, a = 0.05. 



Port alpha joint angle (degrees) 

Figure 1 1 . — Frequency of occurrence of port alpha joint 
angles selected when Jets were fired during the Monte 
Carlo simulations. Distribution is designed as normal 
distribution with mean « -44°, a ** 1 .333°. 



-53 -52 -51 -50 -49 -48 -47 -46 -45 -44 -43 

Port inboard lower beta joint angle (degrees) 

Figure 1 3. — Frequency of occurrence of port inboard 
lower photovoltaic array beta joint angles selected when 
Jets were fired during the Monte Carlo simulations. Dis- 
tribution is designed as normal with a mean * -48°, 

cr » 1.0°. 



-0.2 -0.1 0 0.1 0.2 0.3 0.4 

Port Inboard lower array nominal Norm Z 
dynamic load factor 

Figure 1 5. — Frequency of occurrence of dynamic load 
factor on the port inboard lower photovoltaic array due 
to Z-braklng firings during a nominal approach. Distri- 
bution Is designed as normal with a mean = 0.1, cr = 0.05. 
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Frequency of occurrence 



0.1 0.2 0.3 0.4 0.5 0.6 


Port inboard lower array nominal Y-bum 
dynamic load factor 

Figure 16.— Frequency of occurrence of dynamic load 
factor on the port inboard lower photovoltaic array due 
to Y-bum firings during a nominal approach. Distribution 
is designed is normal with a mean * 0.35, <r « 0.05. 



Port Inboard upper array breakout dynamic 
toad factor 

Figure 1 7.— Frequency of occurrence of dynamic load factor on 
the port inboard upper photovoltaic array due to a Norm Z 
breakout. Distribution Is designed as normal with a 
mean « 1 .3, a * 0.05. 



Port inboard lower array breakout dynamic 
load factor 

Figure 18 —Frequency of occurrence of dynamic toad factor on 
the port inboard lower photovoltaic array due to a Norm Z 
breakout. Distribution is designed as normal with a 
mean « 2.0, a - 0.05. 



Figure 1 9.— Distribution of model (dynamics) uncer- 
tainty factor used in the Monte Carlo simulations. 
Normal distributions with a mean * 1.0, a * 0.0667. 


14 





Retracted 




Transition 


Deployed 


Figure 20. — Photovoltaic array deployable mast. 
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Provide stiffness 
Anchor non-flexing 


diagonals — 

• Flexible battens 

Provide shear strength 
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Provide longerons pivots 
Provide flex batten pivots 
Anchor flexing diagonals — / 
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Provide shear and 
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non-flexing diagonals — ! 


Figure 21 . — Details of deployable mast. 
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Figure 22.— Primary failure mode 
of the deployable mast (Euler 
Suckling). 
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Port inboard upper array nominal mast 
bending moment (in-lbs) 

Figure 24. — Distribution of nominal approach bending moment 
on the port inboard upper photovoltaic array. The data points 
represent the results of the Monte Carlo simulations. The 
curve Is the normal distribution used as a model for the data. 


Port inboard tower array nominal mast 
bending moment (in-lbs) 

Figure 25. — Distribution of nominal approach bending moment 
on the port inboard lower photovoltaic array. The data points 
represent the results of the Monte Carlo simulations. The 
curve Is the normal distribution used as a model for the data. 
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Port Inboard upper array breakout moment 
(in-lbs) 

Figure 26. — Distribution of breakout Induced bending mo- 
ment on the port Inboard upper photovoltaic array. The 
data points represent the results of the Monte Carlo simu- 
lations. The curve is the log-normal distribution used as a 
model for the data. 
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0 5 10 15 20x1 0 3 

Port Inboard lower array breakout moment 
(in-lbs) 

Figure 27. — Distribution of breakout induced bending moment 
on the port inboard lower photovoltaic array. The data points 
represent the results of the Monte Carlo simulations. The 
curve Is the log-norm aJ distribution used as a model for the 
data 
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Mast bending strength (in-lbs) 



Figure 28.— Log-normal distribution representing the Figure 29.— Design load of the SSF photovoltaic array versus 

bending strength of the photovoltaic array mast. This cost, normalized by original initial cost, Co. 

curve Is for the mast with listed strength of 
48500 in-lbs. 
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